"ssg31415926" <newsjunkmail@[EMAIL PROTECTED]
> wrote in message
news:85608ba7-7153-42ab-af0c-c610a2a972b9@[EMAIL PROTECTED]
> On 22 Jul, 16:33, "Richard Mueller [MVP]" <rlmueller-
> nos...@[EMAIL PROTECTED]
> wrote:
>> "ssg31415926" <newsjunkm...@[EMAIL PROTECTED]
> wrote in message
>>
>> news:7b168435-dce5-4691-9483-7fa66c63c6ac@[EMAIL PROTECTED]
>>
>> > In Active Directory Users and Computers, I open Properties on, say, a
>> > user. On the 'Object' tab, under Object class it shows User. But
>> > objectClass is a multi-valued attribute. How does ADUC know which
one
>> > to pick? I want to replicate this in my own code.
>>
>> The most specific class in the objectClass attribute is used. Unlike
>> other
>> multi-valued attributes, the order of the values matters. The last
entry
>> is
>> the most specific. The "Top" class is the least specific and is first.
>> This
>> link may help:
>>
>> http://msdn.microsoft.com/en-us/library/cc223167.aspx
>>
>> --
>> Richard Mueller
>> MVP Directory Services
>> Hilltop Lab -http://www.rlmueller.net
>> --
>
> Thanks very much for your help - I knew that mv-attributes had non-
> specific order - I didn't know that this was an exception.
Something must determine the order/hierarchy of cl*****. I think you can
see
this in the Schema container, where each classSchema object has a
subClassOf
attribute. For example, the "user" classSchema object has subClassOf equal
to "organizationalPerson". The "organizationalPerson" object has
subClassOf
equal to "person", and the "person" object has subClassOf equal to "top".
The "top" classSchema object has subClassOf equal to "top". The
objectClass
attribute of user objects has the values
"top,person,organizationalPerson,user" in that order.
--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--
|
